secure-compare (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package secure-compare, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2015-9238 — CVSS 5.3 (medium): secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself…